Search for: All records

Whitepaper for the 2023 NSAC Long Range Plan 

We conducted a large-scale evaluation of some popular Anti-Phishing Entities (APEs). As part of this, we submitted arrays of CAPTCHA challenge-laden honey sites to 7 APEs. An analysis of the “click-through rates” during the visits from the APEs showed strong evidence for the presence of formidable human analysis systems in conjunction with automated crawler systems. In summary, we estimate that as many as 10% to 24% of URLs submitted to each of 4 APEs (Google Safe Browsing, Microsoft SmartScreen, Bitdefender and Netcraft) were likely visited by human analysts. In contrast to prior works, these measurements present a very optimistic picture for web security as, for the first time, they show presence of expansive human analysis systems to tackle suspicious URLs that might otherwise be challenging for automated crawlers to analyze. This finding allowed us an opportunity to conduct the first systematic study of the robustness of the human analysis systems of APEs which revealed some glaring weaknesses in them. We saw that all the APEs we studied fall prey to issues such as lack of geolocation and client device diversity exposing their human systems to targeted evasive attacks. Apart from this, we also found a specific weakness across the entire APE ecosystem that enables creation of long-lasting phishing pages targeted exclusively against Android/Chrome devices by capitalizing on discrepancies in web sensor API outputs. We demonstrate this with the help of 10 artificial phishing sites that survived indefinitely despite repeated reporting to all APEs. We suggest mitigations for all these issues. We also conduct an elaborate disclosure process with all affected APEs in an attempt to persuade them to pursue these mitigations. 

This search for magnetic monopoles (MMs) and high electric charge objects (HECOs) with spins 0, $1/2$, and 1, uses for the first time the full MoEDAL detector, exposed to $6.46{\mathrm{fb}}^{-1}$proton-proton collisions at 13 TeV. The results are interpreted in terms of Drell-Yan and photon-fusion pair production. Mass limits on direct production of MMs of up to 10 Dirac magnetic charges and HECOs with electric charge in the range $10e$to $400e$, were achieved. The charge limits placed on MM and HECO production are currently the strongest in the world. MoEDAL is the only LHC experiment capable of being directly calibrated for highly ionizing particles using heavy ions and with a detector system dedicated to definitively measuring magnetic charge. Published by the American Physical Society2025 

We report on a search for magnetic monopoles (MMs) produced in ultraperipheral Pb-Pb collisions during Run 1 of the LHC. The beam pipe surrounding the interaction region of the CMS experiment was exposed to $184.07\mathrm{\mu }{\mathrm{b}}^{-1}$of Pb-Pb collisions at 2.76 TeV center-of-mass energy per collision in December 2011, before being removed in 2013. It was scanned by the MoEDAL experiment using a SQUID magnetometer to search for trapped MMs. No MM signal was observed. The two distinctive features of this search are the use of a trapping volume very close to the collision point and ultrahigh magnetic fields generated during the heavy-ion run that could produce MMs via the Schwinger effect. These two advantages allowed setting the first reliable, world-leading mass limits on MMs with high magnetic charge. In particular, the established limits are the strongest available in the range between 2 and 45 Dirac units, excluding MMs with masses of up to 80 GeV at a 95% confidence level. Published by the American Physical Society2024 

Double- and single-differential cross sections for inclusive charged-current ${\nu }_{\mu }$-nucleus scattering are reported for the kinematic domain 0 to $2\mathrm{GeV}/c$in three-momentum transfer and 0 to 2 GeV in available energy, at a mean ${\nu }_{\mu }$energy of 1.86 GeV. The measurements are based on an estimated 995,760 ${\nu }_{\mu }$charged-current (CC) interactions in the scintillator medium of the NOvA Near Detector. The subdomain populated by 2-particle-2-hole (2p2h) reactions is identified by the cross section excess relative to predictions for ${\nu }_{\mu }$-nucleus scattering that are constrained by a data control sample. Models for 2-particle-2-hole processes are rated by ${\chi }^2$comparisons of the predicted-versus-measured ${\nu }_{\mu }$CC inclusive cross section over the full phase space and in the restricted subdomain. Shortfalls are observed in neutrino generator predictions obtained using the theory-based València and SuSAv2 2p2h models. Published by the American Physical Society2025